search for: sandbox_init

Hi, The systrace and rlimit sandboxes have been committed and will be in snapshots dated 20110623 and later. This diff adds support for pre-auth privsep sandboxing using the OS X sandbox_init(3) service. It's a bit disappointing that the OS X developers chose such as namespace-polluting header and function names "sandbox.h", "sandbox_init()", etc. It already forced me to rename a header in OpenSSH. Anyway, the OS X sandbox uses the strictest of the canned poli...

https://bugzilla.mindrot.org/show_bug.cgi?id=2407 Bug ID: 2407 Summary: OpenSSH uses deprecated APIs on MacOS Product: Portable OpenSSH Version: -current Hardware: All OS: Mac OS X Status: NEW Severity: normal Priority: P5 Component: Miscellaneous Assignee: unassigned-bugs at

Got this building portable openssh on os x 10.8.2, reporting as requested. checking for sandbox_init... yes checking sandbox.h usability... no checking sandbox.h presence... yes configure: WARNING: sandbox.h: present but cannot be compiled configure: WARNING: sandbox.h: check for missing prerequisite headers? configure: WARNING: sandbox.h: see the Autoconf documentation configure: WARNING: san...

...were > some warnings during the build (mostly noticed just because I configured > with -Werror and then manually papered over them; not sure how important > these really are): > > - daemon() deprecated (ssh.c, sshd.c) > - utmp, login, logout, logwtmp deprecated (loginrec.c) > - sandbox_init() deprecated (sandbox-darwin.c) I don't think there's much we can do about these without abandoning earlier OS releases. > - struct monitor declared in ssh_sandbox_init() parameter list > (sandbox-darwin.c) Missing monitor.h include. Harmless (it's never used), now fixed. &gt...

Hi, OpenSSH 6.7 is almost ready for release, so we would appreciate testing on as many platforms and systems as possible. This is a big release containing a number of features, a lot of internal refactoring and some potentially-incompatible changes. Snapshot releases for portable OpenSSH are available from http://www.mindrot.org/openssh_snap/ The OpenBSD version is available in CVS HEAD:

Hi, OpenSSH 7.4 is almost ready for release, so we would appreciate testing on as many platforms and systems as possible. This release contains some substantial new features and a number of bugfixes. Snapshot releases for portable OpenSSH are available from http://www.mindrot.org/openssh_snap/ The OpenBSD version is available in CVS HEAD: http://www.openbsd.org/anoncvs.html Portable OpenSSH is